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DUPLICATE 



ACCOUNTING FOR POSTAL CHARGES 

This invention relates to accounting for postal charges 
for batches of items of mail . 

5 Postage meters for dispensing postage in respect of 
charges for mail items are known. In so-called pre- 
payment meters, a value of credit is stored in the postage 
meter and this value of credit is decremented by the 
amount of postage charge as each mail item is processed. 

10 Periodically, when the value of credit becomes low, 
payment for further postage is made and the credit value 
in the postage meter is reset. Other postage meters 
operate in a post payment mode in which the postage meter 
stores an accumulated aggregate value of postage dispensed 

15 in applying postage charges to mail items. Periodically 
the accumulated aggregate value of postage dispensed by 
the postage meter is determined by the postal authority 
and the user of the postage meter is billed for the value 
of postage dispensed. 

20 

When processing batches of mail which may contain 
relatively large numbers of mail items, it is convenient 
for accounting to be effected in respect of each batch of 
items and to make a payment in respect of each batch. 

25 Accordingly it has been proposed to create a statement of 
mailing in respect of the items in a batch. The statement 
of mailing contains data relating to the mail batch and 
this statement of mailing is used to effect a transfer of 
funds from the mailer's account to the account of the 

3 0 postal authority. Since the statement of mailing provides 
the basis for payment for postage charges it is necessary 
that the statement of mailing is created in a secure 
manner and that its authenticity can be verified. 
Accordingly the statement of mailing is digitally signed. 

35 

According to one aspect of the invention a method of 
accounting for postage charges in respect of batches of 



mail items includes the steps of : - 

storing an accumulated aggregate value of postage 
dispensed in applying postage charges to mail items; . 
storing an accumulated pending value of postage dispensed 
in applying postage charges to mail items of batches which 
have not been completed, and 

decrementing the accumulated pending value of postage 
dispensed in respect of a batch of mail items in response 
to the batch being completed. 

The term "completed" in respect of batches of mail is to 
be understood as including batches of mail items for which 
postage charges have been applied in respect of all the 
mail items of the batch but not submitted to the postal 
authority, batches of mail items which have been submitted 
to a postal authority or batches of mail which have been 
submitted to and accepted by the postal authority. 

The accumulated aggregate value of postage dispensed may 
be an accumulated value of postage dispensed in applying 
postage charges to completed batches of mail and in 
response to a batch of mail being completed the 
accumulated pending value is decremented by an amount 
equal to the postage charges in respect of a batch of mail 
when that batch is completed . 

Alternatively the accumulated aggregate value of postage 
dispensed may be postage dispensed in applying postage 
charges to mail including both completed and uncompleted 
batches and the pending value is decremented by an amount 
equal to the cost of postage charges in respect of a batch 
of mail when that batch is completed . 

The stored accumulated aggregate value of postage 
dispensed and the accumulated pending value of postage 
dispensed in applying postage charges to mail items of 
batches which have not been completed may be utilised to 
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deteirmine a payment due in respect of completed batches of 
mail . 

According to a second aspect the invention also 
5 encompasses apparatus for carrying out the steps of the 
method hereinbefore defined. 

Embodiments of the invention will now be described by way 
of example with reference to the drawings in which:- 
10 Figure 1 is a block diagram of mail preparation apparatus, 
and 

Figure 2 illustrates registers provided in a postage 
metering device of the mail preparation apparatus. 

15 Referring to Figure 1 of the drawings, mail preparation 
apparatus includes a postage metering device comprising a 
postal secure device (PSD) 10 operable to dispense postage 
in respect of mail items and a printer 11 for printing 
postal indicia on the mail items. The PSD 10 includes 

2 0 electronic accounting and control means comprising a 
micro-processor 12 operating under program routines stored 
in a read only memory (ROM) 13. A random access memory 
(RAM) 14 is provided for use as a working store for 
storage of temporary data during operation of the PSD. 

25 Non-volatile duplicated memories (NVM*s) 15,. 16 are 
provided for the storage of critical data relating to use 
of the PSD. The PSD is powered from an external mains 
powered power supply 17. The NVM^s 15, 16 retain data 
stored therein even when the PSD 10 is not powered by the 

30 power supply 17. The PSD is provided with an input/output 
port 18 connected to a mail preparation interface which 
conveniently is a personal computer 19. The 
microprocessor 12 outputs, via the port 18, print data 
signals to the personal computer 19 for operation of the 

35 printer 11 and receives from the personal computer 19, 
via the port 18, postal data relating to mail items to be 
printed with postage indicia. The postal data may be 
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input by means of a user operated keyboard or the like of 
the personal computer or from, for example, a database of 
recipient addresses. Also the personal computer is 
utilised to communicate with a remote data centre 26 of a 
5 postal authority that is to receive items of mail whereby 
messages may be sent by the mail preparation apparatus to 
the postal authority and messages may be received by the 
mail preparation apparatus from the postal authority. 
The communication between the mail preparation apparatus 
10 and the data centre 26 is effected via a communication 
link 27 which may be provided by a public telephone 
network. The personal computer may also be utilised to 
output control signals to other operational modules (not 
shown) of the mail preparation apparatus. 

15 

The microprocessor 12 carries out accounting functions in 
relation to dispensing of postage charges by the postage 
meter in respect of mail items. Accounting data relating 
to operation of the PSD in dispensing postage charges is 

2 0 stored in the NVM's 15, 16. The accounting data includes 

an accumulated aggregate value of postage charges 
dispensed by the PSD 10, a count of the number of mail 
items processed and, if desired, a count of the number of 
mail items for which a postage charge in excess of a 
25 predetermined value has been dispensed. As illustrated 
in Figure 2, the accumulated aggregate value of postage 
charges dispensed by the PSD is stored in an ascending 
tote register 21, the count of items is stored in an items 
register 22 and the count of items for which a postage 

3 0 charge in excess of a predetermined value has been 

dispensed is stored in a high items register 23. The 
NVM's 15, 16 also include a pending tote register 25 and, 
if desired, a pending items register 28. The functions of 
the pending tote register 25 and of the pending items 
35 register will be explained hereinafter. 

As is well known in the postage metering art, each of the 
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registers referred to hereinbefore for storing accounting 
data is replicated in order to enable integrity of the 
accounting data to be maintained even in the event of a 
fault or termination of power from the power supply 17 to 
5 the PSD. Two replications of each of the registers are 
provided in each of the memory devices 15, 16. 

The PSD 10 also includes a crypto-device 24 operable by 
the microprocessor 12 to carry out cryptographic 
10 operations in respect of data. The cryptographic 
operations may include either or both encryption of data 
and the derivation of a digital signature from data. 

In order to prevent or at least impede unauthorised access 
15 to the electronic circuits of the PSD, the PSD is housed 
in a secure housing 2 0 and the housing is so constructed 
or tamper detection means are provided to provide an 
indication if tampering has been attempted or has 
occurred. 

20 

In operation of the PSD 10 in respect of dispensing 
postage for a mail item, the microprocessor 12 carries out 
an accounting operation in respect of accounting data 
stored in the NVM's 15, 16 to reflect the postage charge 
25 to be applied to the mail item. This accounting operation 
includes incrementing of the tote register 21 by the 
amount of postage charge and incrementing of the items 
register 22 by unity for each mail item. 

3 0 The microprocessor generates postal indicium data that is 
needed for inclusion in a postal indicium to be printed on 
the mail item. Data defining the postal indicium may be 
generated wholly by the PSD 10 or partly by the PSD and 
partly by the personal computer 19 . The postal indicium 

35 data to be included in the postal indicium includes the 
amount of the postage charge, the date of processing the 
mail item and an identification of the PSD. In addition 
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the postal indicium data may include additional data items 
for example a serial number' for the item and recipient 
address data. The recipient address data in respect of a 
mail item may, for example, be recipient ZIP or postal 
5 code. The postal indicium also includes a digital 
signature and the microprocessor initiates operation of 
the crypto-device 24 to generate the digital signature. 
The crypto-device 24 operates under an algorithm using a 
stored cryptographic key to generate the digital signature 

10 derived from all or selected ones of the data items of the 
postal data. The cryptographic key is stored in the 
NVM's 15, 16. The microprocessor outputs the postal 
indicium data and the digital signature to the personal 
computer so that the personal computer is enabled to 

15 operate the printer to print the required postal indicium 
on the mail item, the printed postal indicium containing 
the data items of the postal indicium data and the digital 
signature. By including a digital signature in the 
indicium, the authenticity of the postal indicium data in 

2 0 the printed postal indicium may be verified by deriving a 

digital signature from the postal indicium data contained 
in the printed postal indicium and comparing the derived 
digital signature with the digital signature contained in 
the printed postal indicium. Instead of generating a 
25 digital signature, the crypto-device 24 may generate an 
encryption of the postal indicium data and the encryption 
of the postal indicium data is then included in the postal 
indicium. Authenticity of the printed postal indicium 
data may then be verified by decrypting the encryption and 

3 0 comparing the data obtained from decryption with the 

postal indicium data contained in the printed postal 
indicium. 

In processing a batch comprising a plurality of mail 
35 items, the PSD carries out the accounting operation and 
the generation of a digital signature or encryption and 
operation of the printer to print a postal indicium in 
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respect of each mail item of the batch. The PSD outputs 
the postal indicium data and 'the digital signature to the 
personal computer 19 to enable the personal computer 19 to 
operate the printer 11 to print the required postal 
5 indicium on each mail item. 

As the mail items of a batch of mail are processed and 
postal indicia are printed thereon, the mail preparation 
apparatus accumulates mailing data relating to the mail 

10 items of the batch of mail. The mailing data includes 
items of data that are input to the mail preparation 
apparatus or that are generated in connection with the 
processing of the mail. Examples of items of data that 
may be included in the mailing data are postage charge, 

15 class of service and recipient address data. The mailing 
data may relate to each individual item of a batch of mail 
or may relate to sets of mail items in the batch where a 
set of mail items is a group of mail items having a 
predetemnined common characteristic, for example a set of 

2 0 mail items may comprise a group of mail items having the 

same class of service, a group of mail items having the 
same postage charge, a group of mail items having a common 
destination area. However it is to be understood that a 
set of mail items may be a group of mail items having any 
25 other predetermined common characteristic or combination 
of predetermined common characteristics by which the 
postal authority wish to handle the mail items of the 
batch. It will be appreciated that a set of mail items 
may comprise only a single mail item and that a batch of 

3 0 mail items may comprise one or more sets of mail items as 

well as one or more single mail items which do not have 
the predetermined characteristic in common with other 
mail items. Furthermore it is to be understood that a 
batch of mail items may include more than one set having 
35 the same predetermined common characteristic. 



The mail preparation apparatus accumulates the mailing 
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data and when the final item of a batch of mail items has 
been processed, the mail preparation apparatus generates a 
submission message containing the accumulated mailing data 
relating to the mail items in the batch of mail items. 
5 The submission message is sent to the postal authority. 
The submission message provides the postal authority with 
information, for example the quantity of mail, the class 
or classes of service and the destinations of the mail 
items, whereby the postal authority is enabled to 

10 determine the logistics of handling the mail items. The 
submission message may accompany the batch of mail items 
when the batch of mail is dispatched to the postal 
authority. However it is preferred that the submission 
message is. transmitted electronically to the postal 

15 authority and accordingly for this purpose the personal 
computer 19 is placed in communication with the data 
centre 2 6 of the postal authority. The transmission of 
the submission message to the postal authority is 
effected, after all of the items of the batch of mail have 

20 been processed by the mail preparation apparatus, when it 
is decided to submit the batch of mail to the postal 
authority. As a result the postal authority receives the 
mailing data relating to the batch of mail prior to 
receiving the actual batch of mail and is enabled to plan, 

25 in advance of receipt of the mail, for the handling of the 
mail items of the batch. The submission message for a 
batch of mail will usually contain a large amount of data. 
Generation of a digital signature for the submission 
message to enable authentication of the data in the 

3 0 submission message therefore would involve processing of 
this large amount of data and a large amount of secure 
memory would be needed to for storing the data. 
Accordingly the submission message is not digitally signed 
or stored in secure memory. In addition to providing 

35 information to the postal authority in respect of the mail 
items to enable the postal authority to handle the mail 
items of the batch and to plan the logistical handling of 



the mail the submission message may contain data 
relating to postage charges' for the items in the batch, 
but this data is not authenticated . Data relating to 
payment for postage charges is transmitted in a verifiable 
manner by means of an account statement as will be 
explained hereinafter. 

As mentioned in relation to Figure 2, the NVM's 15, 16 are 
provided with a pending tote register 25 and, if desired, 
a pending items register. When mail items are processed 
the tote value in the tote register 21 is incremented as 
described hereinbefore. In addition, the pending tote 
register 25 also is incremented by the amount of the 
postage charge. When all of the mail items of a batch of 
mail have been processed and it is desired to submit" the 
batch of mail to a postal authority, the mail preparation 
apparatus generates and transmits a submission message as 
hereinbefore described and submission of the physical mail 
items to the postal authority is initiated. Subsequent to 
transmission of the submission message the microprocessor 
decrements the pending tote register 25 by the total 
postage charge for the batch of mail submitted to the 
postal authority. If the pending tote register is zero at 
the commencement of processing a batch of mail, at the end 
of processing that batch the pending tote register value 
will have been incremented to equal to the total postage 
charge for the batch. If all the items of the batch have 
been processed but the batch has not yet been submitted to 
the postal authority and processing of a subsequent batch 
is commenced, the pending tote register value will be 
equal to the total postage charge for the processed batch 
plus the aggregate of postage charges for those items of 
the subsequent batch which have been processed. 
Accordingly when the batch is submitted to the postal 
authority, the pending tote register will be decremented 
by an amount equal to the total postage charge for the 
submitted batch and the resultant register value will be 
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the aggregate postage charge of the items of the 
subsequent batch that is being processed. Thus at any 
time, the value of the pending tote register 25 is equal 
to the aggregate value of postage charges for items which 
5 have been processed but which have not yet been submitted 
to the postal authority. 

The submission of a batch of mail to the postal authority 
involves passing a number of messages between the mail 

10 preparation apparatus of the mailer and the postal 
authority . These messages include the submission message 
sent from the mailer to the postal authority, an 
acknowledgement message sent by the postal authority to 
the mailer acknowledging receipt of the submission message 

15 by the postal authority, and an acceptance message sent by 
the postal authority when a batch of mail is accepted by 
the postal authority . The decrementing of the pending 
tote register in respect of a submitted batch of mail is 
initiated by the transmission of the submission message or 

2 0 the receipt of one of the messages from the postal 

authority. Preferably the decrementing of the pending 
tote register is initiated by receipt , by the mail 
preparation apparatus, of the acceptance message from the 
postal authority. The acceptance message may include an 
25 amount determined by the postal authority to be due in 
respect of the total postage charge for the batch of mail 
accepted by the postal authority and in response to 
receipt of the message, the microprocessor 12 is operated 
to effect decrementing of the pending tote register by the 

3 0 amount of total postage charge contained in the acceptance 

message . Instead of including the determined postage 
charge in the acceptance message, the PSD may include an 
additional register to store the total postage charge for 
a batch of mail submitted to the postal authority. It is 
35 preferred that the acceptance message is digitally signed 
and, when received by the mail preparation apparatus, that 
the authenticity of the acceptance message is verified 

I 



prior to effecting decrementing of the pending tote 
register. 

It will be appreciated that the tote register value is the 
accumulated aggregate value of postage which has been 
dispensed and hence is the sum of postage charges which 
have been dispensed in respect of items of batches which 
have been submitted to the postal authority, of postage 
charges in respect of items of any batch or batches for 
which all the items have been processed which has not yet 
been submitted and of postage charges in respect of those 
items which have been processed of any batch for which the 
processing has not yet been completed. 

Periodically the PSD is operated to generate an account 
statement that is transmitted to the remote data centre 
26, or to an accounting centre operated by or on behalf of 
the postal authority, for the purpose of accounting for 
payment of charges incurred by the PSD. 

The account statement includes at least an identification 
of the PSD or of the mailer, the value of the tote 
register and the value of the pending tote register. The 
microprocessor operates the crypto-device 24 to derive a 
digital signature from data included in the account 
statement and the account statement is signed with this 
digital signature. The signed account statement is 
transmitted to the remote data centre. The remote data 
centre verifies the authenticity of the account statement 
by deriving a digital signature^ from the information 
received in the account statement and comparing the 
derived signature with the digital signature transmitted 
with the account statement. The verified account 
statement may then be used by the postal authority for 
billing the mailer or for initiating a transfer of funds 
from the mailer's bank account. Accordingly the account 
statement provides to the postal authority the aggregate 
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of postage charges dispensed. The aggregate of postage 
charges dispensed at the time of the preceding account 
statement received by the postal authority is known to the 
postal authority and hence the postal authority is enabled 
5 to calculate the amount of postage dispensed since the 
preceding account statement. Also the account statement 
includes the pending tote register value of postage 
dispensed in respect of mail items not yet submitted and 
by subtraction of the pending tote register value the 

10 postal authority is provided with information as to the 
total payment due in respect of submitted complete mail 
batches. It will be appreciated that more than one batch 
of mail may have been completed and submitted after 
generation of the preceding account statement and hence a 

15 currently generated account statement will provide 
information as to the total payment due in respect of one 
or more completed batches of mail submitted after the 
generation of the preceding account statement. 

20 In addition to the pending tote register 25, a pending 
items register 2 8 may be provided. The pending items 
register 2 8 is incremented by unity in respect of each 
mail item and when the pending tote register 25 is 
decremented in respect of postage charges for a submitted 

25 batch or batches of mail, the pending items register is 
decremented by the number of items in the batch or batches 
of mail submitted to and accepted by the postal authority. 

In an alternative embodiment the storing of accounting 
30 data in the NVM*s 15, 16 and the decrementing of the 
pending tote register 25, and if provided, the pending 
items register 2 8 is modified. During processing of mail 
items the accounting data in the pending tote register 25 
is incremented by the amounts of postage charges applied 
35 in respect of the mail items but the tote register 21 is 
not incremented. Similarly if the pending items register 
28 is provided, the pending items register is incremented 
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but the items register 22 is not incremented. When a 
batch of mail is submitted' and accepted by the postal 
authority, the tote register 21 is incremented by the 
total postage charge in respect of the accepted batch and 
5 the pending tote register 25 is decremented by total 
postage charge in respect of that accepted batch. Thus at 
any instant, the value of the tote register 21 is equal to 
the total value of postage charges in respect of mail 
items that have been processed in batches that have been 

10 submitted to the postal authority and, as in the 
embodiment described hereinbefore, the value of the 
pending tote register 25 is equal to the aggregate value 
of postage charges for items which have been processed but 
which have not yet been submitted to the postal authority. 

15 If the pending items register 28 is provided the value of 
the items register 22 is equal to the items count of mail 
items that have been processed in batches that have been 
submitted and accepted by the postal authority and the 
value of the pending items register 2 8 is equal to the 

2 0 count of items which have been processed but which have 

not yet been submitted to the postal authority. 

It will be appreciated that, whereas the submission 
message and the data included therein is not critical for 

25 the accounting for payment in respect of postage charges 
as discussed hereinbefore, the account statement is 
critical for the accounting for payment in respect of 
postage charges and is generated securely within the 
secure housing of the PSD from accounting data stored 

30 securely in the NVM»s 15, 16 and the digital signing of 
the account statement enables the verification of 
authenticity of the account statement by the postal 
authority. Since the mailing data is not critical 
accounting data, the mailing data may be accumulated in 

3 5 non- secure storage, for example the hard disc storage 

device of the personal computer and the submission message 
may be generated by the personal computer. 
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It is to be understood that 'the account statement may be 
generated and transmitted at any convenient time and that 
the provision of the pending tote register 25 enables 
determination of the amount of postage dispensed in 
5 respect of mail items of batches of mail which have not 
been submitted to the postal authority so that it is 
possible to distinguish between an amount of committed 
postage charges dispensed in respect of batches of mail 
which have been submitted to the postal authority and an 
10 amount of un-committed postage charges in respect of items 
of mail for which a batch has not been submitted to the 
postal authority . 
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